"Bad signature" in many rpm packages
 

I am a new Mandrake Club subscriber, and have urpmi sources set up for free and club downloads. But many packages have "bad signatures" when I try to install them, even those from Mandrake's own site! I find no help on this and have just gotten in the habit of
ignoring the problem and installing anyway. What should I be doing?!

just that...if it works, it works...usually third party software will have that

don't worry about it. i get it all the time when i install software that's not from the mandrake install cds.

Here is a link form linux-mandrake archives on how someone fixed the same problem.

http://www.mail-archive.com/newbie%4...msg156984.html

What am I to do???? I can't update!!!!

[root@localhost curt]# urpmi --auto --auto-select

The following packages have bad signatures:
/var/cache/urpmi/rpms/gnome-vfs2-2.4.2-5mdk.i586.rpm: Missing signature (sha1 md5 OK)
/var/cache/urpmi/rpms/libgnome-vfs2_0-2.4.2-5mdk.i586.rpm: Missing signature (sha1 md5 OK)

Did you update your urpmi sources recently? Here are some steps that I took that seemed to fix my problems:

Following jschiwal's post, I did:

Step 1 (Not sure if this is necessary)

# rpm -qa gpg-pubkey*
This showed me the list of keys currently installed.
Then I removed each of them (run command for each public key):
# rpm -e gpg-pubkey-xxxxxxxx-xxxxxx
Then I imported my local copy back in (again, run this command for each key file):
# rpm --import /etc/RPM-GPG-KEYS/xxxxxxxx.asc
This alone didn't fix the issue for me.

Step 2 (What most likely fixed it)

I had to upgrade my urpmi. Thankfully it can upgrade itself:
# urpmi urpmi
It may still bark about bad signatures. Ignore and install away. After that, install whatever set out to install in the first place. So far I haven't run into a package with bad key.